CITI Training Exam Questions and
Answers 100% PASS
Does HIPAA prohibit physicians from discussing recruitment into studies with patients for
whom involvement might be appropriate?—ANSWER-Physicians can continue to discuss
such options with their own patients, since this would be part of treatment.
Does HIPAA permit research authorizations to be combined with other documents?—
ANSWER-Yes, research authorizations for may be combined with any other legal permission
related to the research study, including another authorization or consent to participate.
These three action must be taken after a breach:—ANSWER-1.) Take Immediate action to
stop the activity causing the breach, if applicable
2.) Conduct a detailed analysis to determine threshold of financial, reputational, or other
harm that may have occurred.
3.) Notify the Privacy Official
True or False: After a breach, patients should be notified.—ANSWER-False
True or False: HIPAA permits a verbal authorization for research in certain circumstances.—
ANSWER-False
, True or False: An authorization or waiver of authorization is not necessary if the researcher is
only looking at records of his or her own patients in a retrospective chart review and is only
recording de-identified information for research purposes.—ANSWER-False
To obtain a complete waiver of authorization for a research project, the researcher must
provide the Privacy Board evidence of these three things:—ANSWER-1.) The use and
disclosure of PHI involves no more than the minimal risk to the subject's privacy rights
2.) The reason the information being sought is necessary
3.) The reason it is not practicable to obtain an authorization
To obtain a complete waiver of authorization for a research project, the researcher must
provide the Privacy Board evidence that the use and disclosure only involves information on
deceased individuals.—ANSWER-False. This is not one of the criteria that must be met in
order for the IRB or Privacy Board to approve the waiver or alteration of authorization.
All of the following are examples of new enforcement rules under HITECH, EXCEPT:—
ANSWER-Revocation of medical licensing by the Department of Health and Human Services
True or False: Encryption is an effective deterrent against breaches of PHI maintained
electronically.—ANSWER-True
True or False: A researcher must provide a copy of the research authorization to the covered
entity where he/she wants to look at or obtain PHI about the subject.—ANSWER-True
True or False: Quality of care of an IVF patient will not be affected by their decision to
donate or not.—ANSWER-True. IVF patients who donate embryos for use in research are not
considered human subjects under the Common Rule unless the investigator obtains data
© 2026 Copyright. All Rights Reserved. This document is
protected by copyright law, Copyrighted By Brittie Donald
Answers 100% PASS
Does HIPAA prohibit physicians from discussing recruitment into studies with patients for
whom involvement might be appropriate?—ANSWER-Physicians can continue to discuss
such options with their own patients, since this would be part of treatment.
Does HIPAA permit research authorizations to be combined with other documents?—
ANSWER-Yes, research authorizations for may be combined with any other legal permission
related to the research study, including another authorization or consent to participate.
These three action must be taken after a breach:—ANSWER-1.) Take Immediate action to
stop the activity causing the breach, if applicable
2.) Conduct a detailed analysis to determine threshold of financial, reputational, or other
harm that may have occurred.
3.) Notify the Privacy Official
True or False: After a breach, patients should be notified.—ANSWER-False
True or False: HIPAA permits a verbal authorization for research in certain circumstances.—
ANSWER-False
, True or False: An authorization or waiver of authorization is not necessary if the researcher is
only looking at records of his or her own patients in a retrospective chart review and is only
recording de-identified information for research purposes.—ANSWER-False
To obtain a complete waiver of authorization for a research project, the researcher must
provide the Privacy Board evidence of these three things:—ANSWER-1.) The use and
disclosure of PHI involves no more than the minimal risk to the subject's privacy rights
2.) The reason the information being sought is necessary
3.) The reason it is not practicable to obtain an authorization
To obtain a complete waiver of authorization for a research project, the researcher must
provide the Privacy Board evidence that the use and disclosure only involves information on
deceased individuals.—ANSWER-False. This is not one of the criteria that must be met in
order for the IRB or Privacy Board to approve the waiver or alteration of authorization.
All of the following are examples of new enforcement rules under HITECH, EXCEPT:—
ANSWER-Revocation of medical licensing by the Department of Health and Human Services
True or False: Encryption is an effective deterrent against breaches of PHI maintained
electronically.—ANSWER-True
True or False: A researcher must provide a copy of the research authorization to the covered
entity where he/she wants to look at or obtain PHI about the subject.—ANSWER-True
True or False: Quality of care of an IVF patient will not be affected by their decision to
donate or not.—ANSWER-True. IVF patients who donate embryos for use in research are not
considered human subjects under the Common Rule unless the investigator obtains data
© 2026 Copyright. All Rights Reserved. This document is
protected by copyright law, Copyrighted By Brittie Donald
